Short version. TidyPhotos does not collect, transmit, sell, rent, or share any personal data. The app has no servers. The app does not require an account. The app does not contain any third-party analytics, advertising, or tracking SDK. All of your photos, videos, voice memos, in-app progress, and preferences are stored exclusively on your device and remain under your control at all times.

This Privacy Policy explains, in detail, what data TidyPhotos does and does not handle, the iOS permissions the app requests and why, how Apple’s In-App Purchase system processes payments, and the rights you have under laws such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the UK Data Protection Act, the Personal Data Protection Law of the United Arab Emirates, and similar privacy regulations.

1. Data controller

TidyPhotos is published by Fu Zhonglin (付忠霖), an individual developer (referred to in this policy as “TidyPhotos”, “we”, “us”). Because we do not collect any personal data from you, there is, in the strict sense, no personal data for us to control. You remain the sole controller of everything stored on your device.

For privacy questions, contact 376662397@qq.com.

2. Information we do NOT collect

To be unambiguous, the following information is never collected, transmitted, or shared by TidyPhotos:

TidyPhotos does not perform any network request in the normal course of using the app, with the sole exception of communicating with Apple for In-App Purchase receipts (see Section 6).

3. Information stored locally on your device

The app stores the following information locally on your device, in the app’s sandboxed container. None of it leaves your device:

You can erase all of the above at any time by deleting the app from your device. Uninstalling TidyPhotos removes its sandbox entirely. iOS may also delete app sandbox data automatically when storage is critically low.

4. iOS permissions we request

TidyPhotos asks for the following iOS permissions only when needed. Each permission is requested at the moment it is first required, never at first launch:

We do not request location, contacts, calendar, Bluetooth, motion, or advertising-tracking permissions.

5. How the swipe-to-delete flow works

TidyPhotos never deletes a photo or video as a result of a single swipe. The flow is intentionally two-step:

  1. You swipe up on an item. The item is added to a local “Marked for deletion” queue. The original item is not modified yet.
  2. You confirm deletion in the Review screen. Only at this moment does TidyPhotos call Apple’s PhotoKit APIs to remove the items you marked, and iOS moves the deletion through its own Recently Deleted album with the standard 30-day retention policy.

This two-step pattern is a product safety feature, not a privacy practice, but it materially reduces the chance that any media item is unintentionally or permanently removed.

6. Apple In-App Purchases

TidyPhotos offers optional subscriptions (Monthly, Annual) and a Lifetime unlock. All purchases are processed exclusively by Apple through StoreKit. We do not collect, store, or transmit your name, email, billing address, or payment instrument. Apple returns a receipt to your device; TidyPhotos may store that receipt locally to determine your entitlement. Apple’s handling of purchase data is governed by Apple’s Privacy Policy.

All sales are final. Refund requests are handled by Apple Support through the standard App Store refund flow.

7. Voice memos and on-device speech recognition

When you record a voice memo, the audio file is stored inside the app sandbox on your device. If you choose to enable transcription, TidyPhotos calls Apple’s Speech framework, which performs recognition on-device when available. Audio and transcripts are never uploaded to any server, including ours or any third-party service.

8. Third-party services

TidyPhotos does not integrate any third-party SDK that accesses your photos, voice memos, or personal data. The app contains no analytics SDK, no advertising SDK, no crash-reporting SDK, no A/B testing SDK, no social SDK, and no remote-configuration SDK.

9. Children’s privacy

TidyPhotos does not knowingly collect any personal data from children. The app does not include any feature that targets children as a primary audience, contains no advertising, and requires no account. Because no data is collected at all, no special handling is required under the U.S. Children’s Online Privacy Protection Act (COPPA), the EU GDPR-K provisions, the UK Age-Appropriate Design Code, or equivalent laws.

10. Your rights under GDPR (EEA & UK)

Because TidyPhotos does not process any personal data on its servers, most GDPR rights (access, rectification, erasure, restriction, objection, portability) translate to actions you can perform directly on your device:

For any privacy request that we cannot resolve by pointing you to the corresponding on-device control, write to 376662397@qq.com.

11. Your rights under CCPA/CPRA (California)

The CCPA and CPRA grant California residents the right to know, delete, correct, and limit the use of sensitive personal information. Because TidyPhotos does not collect personal information, does not sell personal information, and does not share personal information for cross-context behavioral advertising, there is no personal information to disclose, sell, or delete beyond what is stored locally on your device and is therefore already fully under your control.

12. International data transfers

TidyPhotos does not transfer any data internationally because it does not transfer any data off your device. Apple’s processing of In-App Purchase receipts is governed by Apple’s privacy policy and occurs within Apple’s infrastructure.

13. Data retention

Data on your device is retained until you delete it. Uninstalling TidyPhotos immediately deletes its sandbox. Photos you mark for deletion pass through iOS’s Recently Deleted album, which iOS itself clears after 30 days; TidyPhotos does not control that 30-day window.

14. Security

Because the app does not transmit your photos, voice memos, or personal data off your device, the largest class of data-security risks (transit interception, server breach, third-party SDK compromise) does not apply. Local data is protected by your device’s passcode, Face ID, and iOS app sandbox.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the change is material, we will surface a notice inside the app or via the App Store release notes before it takes effect.

16. Contact

For any privacy question, request, or complaint, contact:

376662397@qq.com